Legal
Privacy policy
Version 2.0 · 9 July 2026
1. Who we are
Stage1Energy Ltd, registered in Wales, company no. 17222440, is the data controller for personal data collected through this website. Contact: tedevans@stage1energy.co.uk.
2. What we collect
When you submit a form we collect the fields you complete: name, work email, organisation, site address(es), and any message. When you book, Stripe processes your payment; we never see or store full card numbers. Our hosting provider records standard technical logs (IP address, user agent, pages requested).
3. Why we process it
- Contract - taking bookings, confirming scope, and delivering assessments.
- Legitimate interests - responding to B2B enquiries and following up on free screenings. Every follow-up email includes a working opt-out, and we stop on request.
- Consent - analytics cookies (Google Analytics 4), which load only after you accept the cookie banner.
4. Who processes it for us
Netlify (hosting), Web3Forms (form relay), Stripe (payments), and Google Analytics (only after consent). Each acts under its own processing terms. If we add an email service provider for screening follow-up, this policy will be updated first.
5. How long we keep it
Enquiry records: up to 2 years from last contact. Booking and assessment records: up to 6 years, as contractual and tax records. Analytics data: per the retention period configured in Google Analytics. You may request earlier deletion where no legal basis requires retention.
6. Your rights
Under UK GDPR you may request access, rectification, erasure, restriction, objection, and portability, where applicable. Write to tedevans@stage1energy.co.uk. You may also complain to the Information Commissioner's Office at ico.org.uk.
7. Cookies
No analytics cookie is set before you accept the banner. Rejecting the banner leaves only the stored record of your choice. To change your choice, clear this site's data in your browser and revisit.
8. International transfers
Some processors named above may process data outside the UK. Where they do, transfers rely on the safeguards in their processing terms, such as the UK International Data Transfer Addendum or adequacy regulations.